CVE-2026-41613: Microsoft Visual Studio Code MCP Install Dialog Flaw (Envade)
A vulnerability in Microsoft Visual Studio Code's MCP install dialog (CVSS 8.8, aka Envade) enables full code execution or MCP tool call…
Tag: CVE-2026-41613
Amazon Kiro Prompt Injection Vulnerability Enables Data Exfiltration via Kiro Powers
Cybersecurity researchers at Mindguard have disclosed a prompt injection vulnerability in Amazon Kiro, an AI-powered agentic integrated development environment (IDE), that could…
Microsoft Visual Studio Code MCP Install Dialog Flaw
Microsoft Visual Studio Code has a vulnerability (CVE-2026-41613) in its MCP install dialog that allows code execution via crafted deeplinks.